BeWelcome

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

BeWelcome records in CISA KEV

No BeWelcome vulnerabilities are listed in CISA KEV.

1 record

TI-2025-24428 CVE-2025-34292 · GHSA-5j49-q8fx-ph3m

HIGH 76

Rox, the software running BeWelcome, contains a PHP object injection vulnerability resulting from deserialization of untrusted data.

CVSS 4.0CRITICAL 9.4 Network Low privileges No interaction EPSS 0.00778 Published 2025-10-27 Fixed CWE-502